[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxmx43-KgZtb9js1cIXZ6Au2s1ehtT4LKrNrnm5vPSpI":3,"g5a-risk:CVE-2018-19985":181},{"success":4,"data":5,"meta":179},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":62,"references":63,"referencesCount":116,"weaknesses":117,"weaknessesCount":126,"isActivelyExploited":127,"cisaInfo":15,"otxData":15,"relatedBlogPosts":128,"seoMetadata":129,"configurations":154,"relatedVendorCves":177,"notableEvents":178},"CVE-2018-19985","What is CVE-2018-19985?","The function hso_get_config_data in drivers\u002Fnet\u002Fusb\u002Fhso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.","The function hso_get_config_data in drivers\u002Fnet\u002Fusb\u002Fhso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index ...","2019-03-21T16:00:33.373","2019-09-03T00:15:13.08",4.6,"CVSS:3.0\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","PHYSICAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",0.9,3.6,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":23,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":35,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":36,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","LOCAL","PARTIAL",2.1,3.9,2.9,0.00953,[40,40,40,40,40,40,40],"Medium",[44,49,54,59],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"linux","linux_kernel","*","cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"netapp","active_iq_performance_analytics_services","-","cpe:2.3:a:netapp:active_iq_performance_analytics_services:-:*:*:*:*:*:*:*",{"vendor":55,"product":60,"version":57,"criteria":61,"vulnerable":4},"element_software_management_node","cpe:2.3:a:netapp:element_software_management_node:-:*:*:*:*:*:*:*",4,[64,72,75,80,84,87,91,95,98,101,105,109,113],{"url":65,"source":66,"tags":67},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-01\u002Fmsg00023.html","Opensuse",[68,69,70,71],"Mailing List","Release Notes","Patch","Third Party Advisory",{"url":73,"source":66,"tags":74},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-02\u002Fmsg00007.html",[68,69,70,71],{"url":76,"source":77,"tags":78},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F151420\u002FSlackware-Security-Advisory-Slackware-14.2-kernel-Updates.html","Packetstormsecurity",[69,71,79],"VDB Entry",{"url":81,"source":82,"tags":83},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3309","Red Hat",[],{"url":85,"source":82,"tags":86},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3517",[],{"url":88,"source":89,"tags":90},"https:\u002F\u002Fhexhive.epfl.ch\u002Fprojects\u002Fperifuzz\u002F","Epfl",[70,71],{"url":92,"source":93,"tags":94},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F03\u002Fmsg00034.html","Debian",[71],{"url":96,"source":93,"tags":97},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F04\u002Fmsg00004.html",[68,71],{"url":99,"source":93,"tags":100},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F05\u002Fmsg00002.html",[68,71],{"url":102,"source":103,"tags":104},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FJan\u002F52","Seclists",[68,70,71],{"url":106,"source":107,"tags":108},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20190404-0002\u002F","Netapp",[71],{"url":110,"source":111,"tags":112},"https:\u002F\u002Fusn.ubuntu.com\u002F4115-1\u002F","Ubuntu",[],{"url":114,"source":111,"tags":115},"https:\u002F\u002Fusn.ubuntu.com\u002F4118-1\u002F",[],13,[118],{"id":119,"name":120,"description":121,"extendedDescription":122,"status":123,"abstraction":124,"structure":125},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":130,"metaDescription":131,"keywords":132,"canonicalUrl":133,"structuredData":134},"What is CVE-2018-19985? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-19985, a medium severity cyber security vulnerability from 2019. The function hso_get_config_data in drivers\u002Fnet\u002Fusb\u002Fhso.c...","CVE-2018-19985, CVE-2018-19985 vulnerability, CVE-2018-19985 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, linux security, debian security, netapp security, linux_kernel vulnerability, debian_linux vulnerability, active_iq_performance_analytics_services vulnerability, element_software_management_node vulnerability","\u002Fwhat-is\u002Fcve-2018-19985",{"@context":135,"@type":136,"headline":130,"description":131,"datePublished":10,"dateModified":11,"author":137,"publisher":141,"about":145,"mainEntityOfPage":149,"articleSection":152,"keywords":153},"https:\u002F\u002Fschema.org","TechArticle",{"@type":138,"name":139,"url":140},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":138,"name":139,"url":140,"logo":142},{"@type":143,"url":144},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":146,"name":6,"description":147,"additionalType":148},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":150,"@id":151},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-19985","Cybersecurity","CVE-2018-19985, CVE-2018-19985 vulnerability, CVE-2018-19985 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[155,163,169],{"Operator":15,"Negate":15,"Nodes":156},[157],{"Operator":158,"Negate":15,"CPEMatch":159},"OR",[160],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":161,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":162},"0AA82BBC-BEEA-49BB-A5A2-EE6D3B9FBBF8","4.19.8",{"Operator":15,"Negate":15,"Nodes":164},[165],{"Operator":158,"Negate":15,"CPEMatch":166},[167],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":168,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Operator":15,"Negate":15,"Nodes":170},[171],{"Operator":158,"Negate":15,"CPEMatch":172},[173,175],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":174,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"83077160-BB98-408B-81F0-8EF9E566BF28",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":176,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E902EEC6-9A41-4FBC-8D81-891DF846A5CB",[],[],{"lastModified":11,"cacheTime":180,"version":33},1792284597812,{"score":182,"band":183,"action":184,"scoredAt":185},18,"Info","Track","2026-10-16T06:45:48.658895+00:00"]